RMIT Classification: Trusted
WP2250 Assignment 2.
Overview
“Russel Street Medical” are happy with your work and want you to continue developing their
website. The website should be hosted on Coreteaching from the url below:
https://titan.csit.rmit.edu.au/~yoursid/wp/a2/ (where “yoursid” is your student number).
Website Expansion and Code Practice [5 marks]
Your wp directory should be protected with a .htaccess file. If you already have a .htaccess file in
your wp or public_html directories, both directories should be protected; if not place a copy of the
.htaccess from your a1 directory into your a2 directory.
You will need to create more PHP files:
tools.php:
a file that contains functions common to all pages and to reduce webpage clutter.
administration.php:
a webpage that shows a login screen to all users by default and administration information
to authorised users, eg patient booking requests and an add user facility.
appointments.txt:
a spreadsheet that you will write to using fputcsv() and read from using fgetcsv().
accessattempts.txt:
a spreadsheet that you will write to using fputcsv()
users.txt:
a spreadsheet that you will write to using fputcsv() and read from using fgetcsv().
Note: The spreadsheets will need to have 606 permissions as PHP will need to write to them. It will
help if you put the spreadsheet headings in manually initially, then each booking is appended to the
spreadsheet without the need to write the headings in each time.
Marks will also be awarded for code organisation and indentation.
Page 2 of 4
RMIT Classification: Trusted
Carousel Gallery [5 marks]
The client would like a carousel gallery on the home page (index.php) of at least five images that
automatically cycle and have the option of a user stepping backwards and forwards though the
gallery by clicking direction area / buttons or thumbnails of each image. This can be a Javascript or
jQuery plugin that you source on the internet OR if you wish you can build your own.
Includes and Modules [5 marks]
Place your common code areas such as the top of each page (ie DOCTYPE head, opening body tag
and header element) and the bottom (ie footer element and closing body & html tags) into external
files and include it into your pages with the require_once() function. The page title should be set
with a variable (or some equivalent method) and be different on each page.
Each page should include the tools.php file and have access to the session object, a suggestion is to
have session_start() near or at the top of the tools.php file.
Patient Booking Facility [10 marks]
All $_POST data from the booking page form in assignment 1 should be checked client side and also
server-side to guard against hackers and cater for those without Javascript enabled. Any errors
detected server-side should be placed near the field in error and the previous inputs should preserve
state, eg text fields should have the same text, checkbox attributes should be checked.
TIP: To bypass client-side validation, include this submit button in your forms:
Submit without validation
Note: The client-side validation can be performed using an external plugin, HTML5 patterns, or using
your own Javascript code.
If the data is all correct, the booking request should be appended to the new appointments.txt
spreadsheet using fputcsv() along with the time that the booking was made. The data can be comma
or tab delimited (ie your choice of delimiter) along with the date and time that the patient submitted
the booking request.
If no errors are detected a booking confirmation message should be displayed letting the patient
know that the office will be in touch soon with a set time, and with a link back to the home page.
Page 3 of 4
RMIT Classification: Trusted
Administration Page with Basic Login & Logout Facility [10 marks]
Note: The administration page layout and design can be put together using a Bootstrap template if
you wish.
The administration team would like an administration page that displays a username / password
login form if no one is logged in, ie if $_SESSION[‘user’] is not set. Set up the admin page to allow at
least two of the three staff members to log in with the username / password credentials below:
Stephen : Drs123!
Abigale : Dra456!
Kiyoko : Nki789!
The username & passwords can be hard coded in tools.php for this part or included in the users.txt
spreadsheet.
Once a user is logged in, ie if $_SESSION[‘user’] is set, they would like to see a “Welcome
{username}” message and a logout button which restores the initial log in form content.
When logged in they also want to see a table of all booking requests found in appointments.txt.
From there, the admin staff will enter times into their own proprietary booking system (ie not a part
of this assignment) and contact patients to arrange actual appointment times.
The client would like you to modify the requested booking date (ie the date the patient wants an
appointment and not the date that the booking was made) so it is easier for a human to read, eg
"2022-10-17" should be displayed as "Monday, 17th October 2022". Have a look through PHP’s date
and time function library to find a function that does this, ie do not write your own unless you are
really keen!
Administration Page with User Register Facility [5 marks]
The admin page is upgraded to:
Read the users.txt file for valid username & password rather than hard coded values.
Allows a logged in user to register (append) another user in a spreadsheet called users.txt.
Makes sure no duplicate logins are made, eg two “stephen”s.
Any failed login attempt should have one simple message that the attempt was not successful near
the form. All unsuccessful login attempts should be appended to accessattempts.txt with just the
username and date-time of the attempt.
RMIT Classification: Trusted
Marking Rubric [40 marks]
Website Expansion and Code Practice [5 marks]
Carousel Gallery [5 marks]
Includes and Modules [5 marks]
Patient Booking Facility with Server-side Validation [10 marks]
Administration Page with Basic Login & Logout Facility [10 marks]
Administration Page with User Register Facility [5 marks]